zizmor-action
Version updated for https://github.com/zizmorcore/zizmor-action to version v0.6.0.
- This action is used across all versions by 6,734 repositories.
Action Type
This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
Action Summary
This GitHub Action automates the execution of zizmor, a security analysis tool, within GitHub Actions workflows. It helps organizations integrate comprehensive security assessments into their CI/CD pipelines to identify and remediate vulnerabilities quickly. The action supports both public and private repositories and provides options for advanced security features, such as collecting and reporting findings via GitHub’s Advanced Security integration.
What’s Changed
zizmor 1.27.0 is now the default version used by the action.
What’s Changed
- Fold Docker image pull output into a collapsed Actions log group by @woodruffw with @Copilot in https://github.com/zizmorcore/zizmor-action/pull/132
- Readme: document missing inputs by @staabm in https://github.com/zizmorcore/zizmor-action/pull/130
- ci: block version sync workflow on forks by @shaanmajid in https://github.com/zizmorcore/zizmor-action/pull/129
- Sync zizmor versions by @github-actions[bot] in https://github.com/zizmorcore/zizmor-action/pull/137
- Add
collectinput by @woodruffw in https://github.com/zizmorcore/zizmor-action/pull/139
New Contributors
- @woodruffw with @Copilot made their first contribution in https://github.com/zizmorcore/zizmor-action/pull/132
- @staabm made their first contribution in https://github.com/zizmorcore/zizmor-action/pull/130
- @shaanmajid made their first contribution in https://github.com/zizmorcore/zizmor-action/pull/129
Full Changelog: https://github.com/zizmorcore/zizmor-action/compare/v0.5.7...v0.6.0